kojee-mcp 0.5.19 → 0.6.0

package/dist/{chunk-XIDCYUTK.js → chunk-ALZX3SGI.js}

@@ -2,10 +2,10 @@ import {
   buildCatchUpNote,
   buildMonitorSpawn,
   buildReplyRecipe
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 import {
   translateToolCallResult
-} from "./chunk-2OLXXOT3.js";
+} from "./chunk-PPTKGWFF.js";
 
 // src/server.ts
 import { Server } from "@modelcontextprotocol/sdk/server/index.js";

package/dist/{chunk-PSVVRGJC.js → chunk-BYV7CWNY.js}

@@ -1,17 +1,17 @@
 import {
   claudeCodeAdapter
-} from "./chunk-XXFVWP6H.js";
+} from "./chunk-N35X22G7.js";
 import {
   GatewayClient,
   applyStableSessionId
-} from "./chunk-U4MNICQI.js";
+} from "./chunk-KH5YEJIM.js";
 import {
   AuthModule
 } from "./chunk-JXMVZEQ7.js";
 import {
   createMcpServer,
   startMcpServer
-} from "./chunk-XIDCYUTK.js";
+} from "./chunk-ALZX3SGI.js";
 import {
   findClaudeAncestorPid
 } from "./chunk-VHKPWUX7.js";
@@ -238,7 +238,7 @@ async function startProxy(config) {
   }
   console.error(`[kojee-mcp] Tandem memberships: ${tandemMembershipCount === -1 ? "unknown" : tandemMembershipCount}`);
   let server;
-  const { selectDelivery } = await import("./registry-CGLE5X54.js");
+  const { selectDelivery } = await import("./registry-YLOFZDI2.js");
   const delivery = selectDelivery(adapter.runtime, {
     supportsChannels: adapter.supportsChannels
   });

package/dist/{chunk-35XBRG3V.js → chunk-KFDZWNQO.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-LSUB6QMP.js";
 import {
   buildCodexWakeReason
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 
 // src/hooks/codex-stop-hook.ts
 import fs from "fs";

package/dist/{chunk-U4MNICQI.js → chunk-KH5YEJIM.js}

@@ -8,7 +8,7 @@ import {
   translateHttpError,
   translateJsonRpcError,
   translateNetworkError
-} from "./chunk-2OLXXOT3.js";
+} from "./chunk-PPTKGWFF.js";
 
 // src/gateway-client.ts
 import crypto from "crypto";
@@ -104,8 +104,11 @@ var GatewayClient = class {
       const body = await this.tryParseErrorBody(response);
       const translated = translateHttpError(response.status, body?.error);
       if (translated) return translated;
+      const detail = body?.error_description ?? body?.detail ?? body?.error ?? "<no detail>";
       return {
-        content: [{ type: "text", text: `Gateway error: ${response.status}` }],
+        content: [
+          { type: "text", text: `Gateway error ${response.status}: ${detail}` }
+        ],
         isError: true
       };
     }

package/dist/{chunk-XXFVWP6H.js → chunk-N35X22G7.js}

@@ -1,6 +1,6 @@
 import {
   buildReplyRecipe
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 
 // src/adapters/claude-code.ts
 function computeSeverity(event) {

package/dist/{chunk-DXJ6QLSJ.js → chunk-PKOBR7ZN.js}

@@ -1,6 +1,6 @@
 import {
   translateToolCallResult
-} from "./chunk-2OLXXOT3.js";
+} from "./chunk-PPTKGWFF.js";
 
 // src/tandem/send.ts
 var SEND_KINDS = ["message", "status"];

package/dist/{chunk-2OLXXOT3.js → chunk-PPTKGWFF.js}

@@ -33,7 +33,7 @@ function translateHttpError(status, errorCode, trigger) {
     }
     if (errorCode === "invalid_dpop_proof") {
       return makeError(
-        "Authentication failed. The proxy will attempt to re-enroll. If this persists, regenerate your gateway token."
+        "Authentication failed (DPoP key rejected). Restart the proxy so it re-enrolls its key. If this persists, regenerate your gateway token."
       );
     }
     if (errorCode === "key_enrollment_required") {
@@ -61,8 +61,71 @@ function translateHttpError(status, errorCode, trigger) {
   }
   return null;
 }
+function translateTandemNotActive(reason) {
+  switch (reason) {
+    // --- genuine inactive / reaped seat: re-joining is the right fix ---
+    case "not_a_member":
+    case "not_active_member":
+      return "You aren't an active member of that Tandem (the seat may have been reaped). Run tandem_join to reactivate it, then retry.";
+    // --- authentication: pairing problem, tandem_join won't help ---
+    case "unauthenticated":
+      return "Your proxy session isn't authenticated/paired with Kojee, so this call was rejected. Re-pair the proxy \u2014 tandem_join won't fix this.";
+    // --- existence / visibility ---
+    case "tandem_not_found":
+      return "That Tandem doesn't exist or isn't visible to you.";
+    // --- power / scope: you lack the required role ---
+    case "owner_only":
+      return "This action requires owner power in this Tandem, which you don't have.";
+    case "admin_only":
+      return "This action requires admin power in this Tandem, which you don't have.";
+    // --- capacity ---
+    case "member_cap_reached":
+      return "This Tandem is full (member cap reached); rejoining won't help \u2014 ask an admin to make room.";
+    // --- message-scoped ---
+    case "message_not_found":
+      return "That message doesn't exist in this Tandem (wrong id, or it was already redacted).";
+    case "redact_forbidden":
+      return "You can't redact that message \u2014 you're neither its author nor an admin of this Tandem.";
+    // --- targeting ---
+    case "target_principal_not_found":
+      return "The target principal isn't a member of this Tandem.";
+    // --- invitations ---
+    case "invitation_not_found":
+      return "That invitation doesn't exist, or it was already revoked or used.";
+    case "invite_required":
+      return "This Tandem requires an invite to join; ask an owner or admin to invite you.";
+    case "invite_invalid":
+      return "That invite token is invalid.";
+    case "invite_expired":
+      return "That invite has expired; request a fresh one.";
+    case "invite_exhausted":
+      return "That invite has no remaining uses; request a fresh one.";
+    case "invite_wrong_principal":
+      return "That invite was issued to a different principal and can't be used by you.";
+    // --- join requests / knocks ---
+    case "join_request_not_found":
+      return "That join request doesn't exist or was already decided.";
+    case "join_request_not_pending":
+      return "That join request was already decided (it's no longer pending).";
+    case "already_member":
+      return "You're already a member of that Tandem.";
+    case "already_requested":
+      return "You already have a pending join request for that Tandem.";
+    case "knock_required":
+      return "This Tandem requires a knock; request to join and wait for an admin to approve.";
+    case "knock_cooldown":
+      return "You're knocking too frequently; wait a bit before requesting to join again.";
+    // --- direct (1:1) Tandems ---
+    case "direct_tandem_immutable_membership":
+    case "direct_immutable":
+      return "This is a direct (1:1) Tandem; its membership can't be changed.";
+    // --- unknown token: surface the real reason verbatim, never the reaped string ---
+    default:
+      return reason ? `Tandem request refused: ${reason}.` : "Tandem request refused.";
+  }
+}
 var TANDEM_ERROR_MESSAGES = {
-  [-32001]: () => "You aren't an active member of that Tandem (the seat may have been reaped). Run tandem_join to reactivate it, then retry.",
+  [-32001]: (_data, message) => translateTandemNotActive((message ?? "").trim()),
   [-32003]: () => "This Tandem is hardened to owner-only membership; you can't join.",
   [-32004]: () => "You aren't a member of that Tandem. Use tandem_join(join_link) first.",
   [-32006]: (data) => {
@@ -91,7 +154,10 @@ function translateJsonRpcError(error) {
       content: [
         {
           type: "text",
-          text: tandemMessage(error.data)
+          text: tandemMessage(
+            error.data,
+            msg
+          )
         }
       ],
       isError: true

package/dist/{chunk-X672ZN7V.js → chunk-Q7T3WAST.js}

@@ -13,7 +13,7 @@ function buildReplyRecipe(event) {
   return `reply directly with tandem_send(tandem_id, ${SEND_BODY_PARAM}, reply_to=<msg>); fetch context only if needed via tandem_messages(tandem_id, since=cursor-1)`;
 }
 function buildCatchUpNote() {
-  return "If the event line `cursor=<n>` ever jumps (a gap) or the log resets (the proxy caps and truncates the messages log in place on overflow \u2014 a `status=rotated` line is recorded in the status sibling), you may have missed messages: catch up with tandem_messages(tandem_id, since=<last cursor you saw>).";
+  return "Cursors are allocated per-Tandem, and the event-log interleaves every subscribed room into one stream \u2014 so track the last `cursor=<n>` you saw keyed by the line's `tandem=<id>` field, and only treat a jump WITHIN the same tandem_id as a gap (a jump between lines from different rooms is normal interleaving, not a missed message). If the cursor jumps within one tandem, or the log resets (the proxy caps and truncates the messages log in place on overflow \u2014 a `status=rotated` line is recorded in the status sibling), you may have missed messages: catch up with tandem_messages(tandem_id, since=<last cursor you saw for THAT tandem>).";
 }
 function buildMonitorNudge(logPath) {
   return `[kojee] Tandem events are being logged but no Monitor is reading them \u2014 you may be missing wake notifications. Spawn the watcher once: ${buildMonitorSpawn(logPath)}. Then ${buildReplyRecipe()}.`;

package/dist/{chunk-74XFVX6Z.js → chunk-XN3IC4B5.js}

@@ -4,6 +4,7 @@ import {
 } from "./chunk-NR4Y54OL.js";
 
 // src/tandem/event-stream.ts
+import { Agent } from "undici";
 var STALE_FLOOR_MS = 9e4;
 var STALE_INTERVAL_MULTIPLIER = 3;
 var STALE_CHECK_INTERVAL_MS = 5e3;
@@ -71,6 +72,10 @@ function createBackoffController(options = {}) {
 var LOG_HEARTBEAT_INTERVAL_MS = 6e4;
 async function startEventStream(opts) {
   let stopped = false;
+  const streamDispatcher = new Agent({
+    bodyTimeout: UNDICI_DEFAULT_BODY_TIMEOUT_MS,
+    headersTimeout: UNDICI_DEFAULT_BODY_TIMEOUT_MS
+  });
   const cursors = /* @__PURE__ */ new Map();
   let currentController = new AbortController();
   let connectGeneration = 0;
@@ -95,6 +100,7 @@ async function startEventStream(opts) {
           currentController,
           isReconnect,
           state,
+          streamDispatcher,
           (tandemId, cursor) => {
             const prev = cursors.get(tandemId);
             if (prev === void 0 || cursor > prev) cursors.set(tandemId, cursor);
@@ -125,6 +131,8 @@ async function startEventStream(opts) {
     stopped = true;
     state.connected = false;
     currentController.abort();
+    void streamDispatcher.close().catch(() => {
+    });
   });
   handle.reconnect = () => {
     if (stopped) return;
@@ -144,12 +152,12 @@ async function startEventStream(opts) {
   });
   return handle;
 }
-async function connectAndConsume(opts, cursors, controller, isReconnect, state, onCursor, onOpen) {
+async function connectAndConsume(opts, cursors, controller, isReconnect, state, dispatcher, onCursor, onOpen) {
   const mapSince = cursors.size > 0 ? serializeCursorMap(cursors) : null;
-  let res = await openStream(opts, controller, mapSince);
+  let res = await openStream(opts, controller, mapSince, dispatcher);
   if (res.status === 400 && mapSince !== null) {
     console.error("[event-stream] per-room ?since rejected (400) \u2014 falling back to bare cursor");
-    res = await openStream(opts, controller, String(Math.min(...cursors.values())));
+    res = await openStream(opts, controller, String(Math.min(...cursors.values())), dispatcher);
   }
   if (!res.ok) throw new Error(`SSE connect failed: ${res.status}`);
   if (!res.body) throw new Error("SSE response has no body");
@@ -163,7 +171,7 @@ async function connectAndConsume(opts, cursors, controller, isReconnect, state,
   await consumeSse(res.body, opts, controller, state, onCursor);
   return true;
 }
-async function openStream(opts, controller, sinceValue) {
+async function openStream(opts, controller, sinceValue, dispatcher) {
   const params = new URLSearchParams();
   if (sinceValue !== null) params.set("since", sinceValue);
   const url = `${opts.brokerUrl}/api/v2/tandems/stream${params.toString() ? "?" + params.toString() : ""}`;
@@ -183,7 +191,11 @@ async function openStream(opts, controller, sinceValue) {
       "Mcp-Session-Id": getSessionId(),
       Accept: "text/event-stream"
     },
-    signal: controller.signal
+    signal: controller.signal,
+    // Isolate this long-lived stream onto its own connection pool so it can
+    // never block tool-call POSTs on the shared global pool. The dispatcher is
+    // owned by startEventStream (per-stream lifecycle) and closed on teardown.
+    dispatcher
   });
 }
 async function consumeSse(body, opts, controller, state, onCursor) {

package/dist/cli.js

@@ -4,12 +4,12 @@ import {
 } from "./chunk-OGHDTFAX.js";
 import {
   startProxy
-} from "./chunk-PSVVRGJC.js";
-import "./chunk-XXFVWP6H.js";
+} from "./chunk-BYV7CWNY.js";
+import "./chunk-N35X22G7.js";
 import {
   pairedConfigPath
 } from "./chunk-YH27B6SW.js";
-import "./chunk-U4MNICQI.js";
+import "./chunk-KH5YEJIM.js";
 import "./chunk-JXMVZEQ7.js";
 import "./chunk-NR4Y54OL.js";
 import {
@@ -19,9 +19,9 @@ import {
 import "./chunk-BLEGIR35.js";
 import {
   VERSION
-} from "./chunk-XIDCYUTK.js";
-import "./chunk-X672ZN7V.js";
-import "./chunk-2OLXXOT3.js";
+} from "./chunk-ALZX3SGI.js";
+import "./chunk-Q7T3WAST.js";
+import "./chunk-PPTKGWFF.js";
 import "./chunk-VHKPWUX7.js";
 
 // src/cli.ts
@@ -44,7 +44,7 @@ program.command("pair <code>").description("Pair this machine against Kojee usin
 });
 program.command("hook").description("Run a kojee MCP hook script (called by Claude Code via ~/.claude/settings.json)").requiredOption("--type <type>", "Hook type: stop, user-prompt-submit, or codex-stop").action(async (opts) => {
   if (opts.type === "stop") {
-    const { runStopHook } = await import("./stop-hook-QZTFH5WV.js");
+    const { runStopHook } = await import("./stop-hook-TCPJFGFF.js");
     await runStopHook();
     process.exit(0);
   } else if (opts.type === "user-prompt-submit") {
@@ -52,7 +52,7 @@ program.command("hook").description("Run a kojee MCP hook script (called by Clau
     await runUserPromptSubmitHook();
     process.exit(0);
   } else if (opts.type === "codex-stop") {
-    const { runCodexStopHook } = await import("./codex-stop-hook-VY7DOMAG.js");
+    const { runCodexStopHook } = await import("./codex-stop-hook-RWQSZTST.js");
     await runCodexStopHook();
     process.exit(0);
   } else {
@@ -78,7 +78,7 @@ Restart Claude Code for hooks to take effect.`
 program.command("send <tandem_id>").description(
   "Send a Tandem message using this machine's paired credentials (~/.kojee). Prints one JSON envelope to stdout: {ok, message_id, cursor, text} on success, {ok:false, error:<typed code>, message} on failure (exit 1)."
 ).requiredOption("--body <text>", "Message body (required)").option("--reply-to <message_id>", "Message id this send replies to").option("--kind <kind>", "Message kind: message | status (default: backend default)").action(async (tandemId, opts) => {
-  const { runSendCli } = await import("./send-cli-IPADRDD2.js");
+  const { runSendCli } = await import("./send-cli-IYJF32PE.js");
   const { exitCode, envelope } = await runSendCli({
     tandemId,
     body: opts.body,
@@ -89,7 +89,7 @@ program.command("send <tandem_id>").description(
   process.exit(exitCode);
 });
 program.command("tail <path>").description("Stream a file's contents and follow appends (portable replacement for `tail -F`)").action(async (filePath) => {
-  const { runTail } = await import("./tail-stream-CEJZGSIR.js");
+  const { runTail } = await import("./tail-stream-4IMXI44S.js");
   try {
     await runTail(filePath);
   } catch (err) {
@@ -98,75 +98,70 @@ program.command("tail <path>").description("Stream a file's contents and follow
   }
 });
 program.command("doctor").description("Diagnose the kojee wake path (proxy, hook-server, SSE stream, event log, Monitor) and print the exact wake recipe").action(async () => {
-  const { runDoctor } = await import("./doctor-U3MTB4GY.js");
+  const { runDoctor } = await import("./doctor-WVX3WCYX.js");
   const code = await runDoctor();
   process.exit(code);
 });
-program.command("init").description(
-  "Set up kojee for a runtime (claude-code | hermes | openclaw | codex). Interactive when stdin is a TTY; `--runtime <id>` for non-interactive/CI. Run after `kojee-mcp pair`."
-).option("--runtime <id>", "Target runtime: claude-code | hermes | openclaw | codex").option("--config-path <path>", "Override the runtime's MCP-config path").option("--hooks-path <path>", "Override the runtime's hooks-file path").option("--token <token>", "Gateway token \u2014 token mode (writes --token/--url into the MCP config)").option("--url <url>", "Broker base URL (token mode / pair URL; default https://rosie-staging.kojee.net)").option("--pair-code <code>", "Pair code \u2014 runs the pair flow (writes ~/.kojee/config.json) before configuring").option("--webhook-url <url>", "Webhook receiver URL (codex/hermes/openclaw)").option("--webhook-secret <secret>", "Webhook HMAC secret (generated if omitted)").option(
-  "--webhook-signature-format <preset>",
-  'Signature preset: "github" = header X-Hub-Signature-256, value sha256=<hex> (default: bare hex in X-Kojee-Signature)'
-).option(
-  "--webhook-signature-header <name>",
-  "Signature header name (default X-Kojee-Signature; overrides the preset's header)"
-).option(
-  "--webhook-signature-prefix <prefix>",
-  "Literal string prepended to the hex digest (default empty; overrides the preset's prefix)"
-).option("--uninstall", "Remove the kojee config for the chosen (or recorded) runtime").action(async (opts) => {
-  const interactive = process.stdin.isTTY === true && opts.runtime === void 0;
-  if (opts.pairCode && !opts.uninstall) {
-    const { runPair: runPair2 } = await import("./pair-P4ILCMT7.js");
-    const { pairedConfigPath: pairedConfigPath2 } = await import("./paired-config-JTFLHMZ2.js");
-    const { defaultPairedKeystorePath: defaultPairedKeystorePath2 } = await import("./keystore-XLEV3FL5.js");
-    const url = (opts.url ?? "https://rosie-staging.kojee.net").replace(/\/+$/, "");
-    try {
-      const r = await runPair2({
-        code: opts.pairCode,
-        url,
-        keystorePath: defaultPairedKeystorePath2(),
-        configPath: pairedConfigPath2()
-      });
-      console.error(r.message);
-    } catch (err) {
-      console.error("[kojee-mcp init] Pairing failed:", err.message);
-      process.exit(1);
-    }
-  }
-  const { loadPairedConfig } = await import("./paired-config-JTFLHMZ2.js");
-  const hasCredential = loadPairedConfig() !== null || opts.token !== void 0;
-  if (!hasCredential && !interactive && !opts.uninstall) {
-    console.error("Not paired. Run `kojee-mcp pair <code> --url <broker>` first, then re-run `init` \u2014 or pass --token/--pair-code, or run `init` in a terminal for the guided wizard.");
-    process.exit(1);
-  }
-  const { runWizard } = await import("./wizard-Y3ULSO2C.js");
-  const result = await runWizard({
-    ...opts.runtime !== void 0 ? { runtime: opts.runtime } : {},
-    ...opts.uninstall ? { uninstall: true } : {},
-    ...opts.configPath ? { configPath: opts.configPath } : {},
-    ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {},
-    // Token-mode threading (token + url ⇒ --token/--url in the written config).
-    // Normalize the URL exactly like the proxy action does (strip trailing /).
-    ...opts.token ? { token: opts.token } : {},
-    ...opts.url ? { url: opts.url.replace(/\/+$/, "") } : {},
-    ...opts.webhookUrl ? { webhookUrl: opts.webhookUrl } : {},
-    ...opts.webhookSecret ? { webhookSecret: opts.webhookSecret } : {},
-    ...opts.webhookSignatureFormat ? { webhookSignatureFormat: opts.webhookSignatureFormat } : {},
-    ...opts.webhookSignatureHeader ? { webhookSignatureHeader: opts.webhookSignatureHeader } : {},
-    ...opts.webhookSignaturePrefix !== void 0 ? { webhookSignaturePrefix: opts.webhookSignaturePrefix } : {},
-    interactive,
-    ...interactive ? {
-      promptRuntime: promptRuntimeFromTty,
-      promptUrl: promptUrlFromTty,
-      promptAuth: promptAuthFromTty,
-      promptToken: promptTokenFromTty,
-      promptPairCode: promptPairCodeFromTty,
-      promptWebhookUrl: promptWebhookUrlFromTty
-    } : {}
-  });
-  console.error(result.output);
-  process.exit(result.exitCode);
-});
+function addInstallOptions(cmd, runtimeHelp) {
+  return cmd.option("--runtime <id>", runtimeHelp).option("--config-path <path>", "Override the runtime's MCP-config path").option("--hooks-path <path>", "Override the runtime's hooks-file path").option("--token <token>", "Gateway token \u2014 token mode (writes --token/--url into the MCP config; requires --url)").option("--url <url>", "Broker base URL (token mode / pair URL; default https://rosie-staging.kojee.net)").option("--pair <code>", "Pair code \u2014 runs the pair flow before configuring (alias of --pair-code)").option("--pair-code <code>", "Pair code \u2014 runs the pair flow (writes ~/.kojee/config.json) before configuring").option("--webhook-url <url>", "Webhook receiver URL (codex/hermes/openclaw)").option("--webhook-secret <secret>", "Webhook HMAC secret (generated if omitted)").option(
+    "--webhook-signature-format <preset>",
+    'Signature preset: "github" = header X-Hub-Signature-256, value sha256=<hex> (default: bare hex in X-Kojee-Signature)'
+  ).option(
+    "--webhook-signature-header <name>",
+    "Signature header name (default X-Kojee-Signature; overrides the preset's header)"
+  ).option(
+    "--webhook-signature-prefix <prefix>",
+    "Literal string prepended to the hex digest (default empty; overrides the preset's prefix)"
+  ).option("--uninstall", "Remove the kojee config for the chosen (or recorded) runtime");
+}
+function makeInstallAction(verb) {
+  return async (opts) => {
+    const interactive = process.stdin.isTTY === true && opts.runtime === void 0;
+    const { runSetup, resolvePairCode } = await import("./setup-handler-7HOFAD7C.js");
+    const pairCode = resolvePairCode(opts);
+    const result = await runSetup({
+      verb,
+      ...opts.runtime !== void 0 ? { runtime: opts.runtime } : {},
+      ...opts.configPath ? { configPath: opts.configPath } : {},
+      ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {},
+      ...opts.token ? { token: opts.token } : {},
+      ...opts.url ? { url: opts.url } : {},
+      ...pairCode ? { pairCode } : {},
+      ...opts.webhookUrl ? { webhookUrl: opts.webhookUrl } : {},
+      ...opts.webhookSecret ? { webhookSecret: opts.webhookSecret } : {},
+      ...opts.webhookSignatureFormat ? { webhookSignatureFormat: opts.webhookSignatureFormat } : {},
+      ...opts.webhookSignatureHeader ? { webhookSignatureHeader: opts.webhookSignatureHeader } : {},
+      ...opts.webhookSignaturePrefix !== void 0 ? { webhookSignaturePrefix: opts.webhookSignaturePrefix } : {},
+      ...opts.uninstall ? { uninstall: true } : {},
+      interactive,
+      ...interactive ? {
+        prompts: {
+          promptRuntime: promptRuntimeFromTty,
+          promptUrl: promptUrlFromTty,
+          promptAuth: promptAuthFromTty,
+          promptToken: promptTokenFromTty,
+          promptPairCode: promptPairCodeFromTty,
+          promptWebhookUrl: promptWebhookUrlFromTty
+        }
+      } : {}
+    });
+    for (const m of result.messages) console.error(m);
+    console.error(result.output);
+    process.exit(result.exitCode);
+  };
+}
+addInstallOptions(
+  program.command("init").description(
+    "Set up kojee for a runtime (claude-code | hermes | openclaw | codex). Interactive when stdin is a TTY; `--runtime <id>` for non-interactive/CI. Run after `kojee-mcp pair`."
+  ),
+  "Target runtime: claude-code | hermes | openclaw | codex"
+).action(makeInstallAction("init"));
+addInstallOptions(
+  program.command("setup").description(
+    "One-line install: pair + write the runtime's MCP config + hooks in one shot (claude-code | codex). `--pair <code> --url <broker> --runtime <id>`, or the token form `--token <T> --url <U> --runtime <id>` for CI."
+  ),
+  "Target runtime: claude-code | codex"
+).action(makeInstallAction("setup"));
 async function withReadline(fn) {
   const readline = await import("readline/promises");
   const rl = readline.createInterface({ input: process.stdin, output: process.stderr });

package/dist/{codex-stop-hook-VY7DOMAG.js → codex-stop-hook-RWQSZTST.js}

@@ -4,9 +4,9 @@ import {
   decideCodexStopHook,
   defaultPeekPending,
   runCodexStopHook
-} from "./chunk-35XBRG3V.js";
+} from "./chunk-KFDZWNQO.js";
 import "./chunk-LSUB6QMP.js";
-import "./chunk-X672ZN7V.js";
+import "./chunk-Q7T3WAST.js";
 export {
   CODEX_PEEK_BUDGET_MS,
   codexPendingMarkerPath,

package/dist/{doctor-U3MTB4GY.js → doctor-WVX3WCYX.js}

@@ -18,7 +18,7 @@ import "./chunk-BLEGIR35.js";
 import {
   buildMonitorSpawn,
   buildReplyRecipe
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 import {
   deriveDiscoveryKey,
   findClaudeAncestorPid
@@ -328,7 +328,7 @@ function formatDoctorReport(report) {
 async function runDoctor() {
   const { readRecordedRuntime } = await import("./runtime-record-WO4IECM6.js");
   if (readRecordedRuntime() === "codex") {
-    const { collectCodexDoctorReport, formatCodexDoctorReport } = await import("./doctor-codex-PA3WO6LR.js");
+    const { collectCodexDoctorReport, formatCodexDoctorReport } = await import("./doctor-codex-Z5M4SFBG.js");
     const report2 = collectCodexDoctorReport();
     console.error(formatCodexDoctorReport(report2));
     return report2.verdict === "broken" ? 1 : 0;

package/dist/{doctor-codex-PA3WO6LR.js → doctor-codex-Z5M4SFBG.js}

@@ -9,7 +9,7 @@ import {
 import "./chunk-BLEGIR35.js";
 import {
   CODEX_LISTEN_CAP_MS
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 
 // src/doctor-codex.ts
 import fs from "fs";

package/dist/{event-stream-XX5EZ6HN.js → event-stream-SYBUJ5EH.js}

@@ -6,7 +6,7 @@ import {
   sanitizeDisplayname,
   serializeCursorMap,
   startEventStream
-} from "./chunk-74XFVX6Z.js";
+} from "./chunk-XN3IC4B5.js";
 import "./chunk-NR4Y54OL.js";
 export {
   UNDICI_DEFAULT_BODY_TIMEOUT_MS,

package/dist/{hook-server-XK2NHLJV.js → hook-server-CWBH6PFL.js}

@@ -3,8 +3,8 @@ import {
   httpStatusForEnvelope,
   parseSendRequest,
   sendFailure
-} from "./chunk-DXJ6QLSJ.js";
-import "./chunk-2OLXXOT3.js";
+} from "./chunk-PKOBR7ZN.js";
+import "./chunk-PPTKGWFF.js";
 
 // src/tandem/hook-server.ts
 import crypto from "crypto";

package/dist/index.js

@@ -1,16 +1,16 @@
 import {
   listTandemIds,
   startProxy
-} from "./chunk-PSVVRGJC.js";
-import "./chunk-XXFVWP6H.js";
-import "./chunk-U4MNICQI.js";
+} from "./chunk-BYV7CWNY.js";
+import "./chunk-N35X22G7.js";
+import "./chunk-KH5YEJIM.js";
 import "./chunk-JXMVZEQ7.js";
 import "./chunk-NR4Y54OL.js";
 import "./chunk-CH32ELFX.js";
 import "./chunk-BLEGIR35.js";
-import "./chunk-XIDCYUTK.js";
-import "./chunk-X672ZN7V.js";
-import "./chunk-2OLXXOT3.js";
+import "./chunk-ALZX3SGI.js";
+import "./chunk-Q7T3WAST.js";
+import "./chunk-PPTKGWFF.js";
 import "./chunk-VHKPWUX7.js";
 export {
   listTandemIds,

package/dist/lib.js

@@ -5,7 +5,7 @@ import {
   normalizeBackendEvent,
   sanitizeDisplayname,
   startEventStream
-} from "./chunk-74XFVX6Z.js";
+} from "./chunk-XN3IC4B5.js";
 import {
   loadPairedConfig,
   pairedConfigPath
@@ -13,7 +13,7 @@ import {
 import {
   GatewayClient,
   applyStableSessionId
-} from "./chunk-U4MNICQI.js";
+} from "./chunk-KH5YEJIM.js";
 import {
   AuthModule
 } from "./chunk-JXMVZEQ7.js";
@@ -29,7 +29,7 @@ import {
   saveKeystore
 } from "./chunk-CH32ELFX.js";
 import "./chunk-BLEGIR35.js";
-import "./chunk-2OLXXOT3.js";
+import "./chunk-PPTKGWFF.js";
 export {
   AuthModule,
   GatewayClient,

package/dist/{registry-CGLE5X54.js → registry-YLOFZDI2.js}

@@ -1,12 +1,12 @@
-import "./chunk-35XBRG3V.js";
+import "./chunk-KFDZWNQO.js";
 import "./chunk-PHXO5P25.js";
 import "./chunk-LSUB6QMP.js";
 import {
   claudeCodeAdapter
-} from "./chunk-XXFVWP6H.js";
-import "./chunk-XIDCYUTK.js";
-import "./chunk-X672ZN7V.js";
-import "./chunk-2OLXXOT3.js";
+} from "./chunk-N35X22G7.js";
+import "./chunk-ALZX3SGI.js";
+import "./chunk-Q7T3WAST.js";
+import "./chunk-PPTKGWFF.js";
 
 // src/delivery/lib/fanout.ts
 async function deliverEvent(event, sinks) {
@@ -91,7 +91,7 @@ function createClaudeCodeDelivery() {
     name: "claude-code",
     async start(ctx) {
       const { EventQueue } = await import("./event-queue-5YVJFR3E.js");
-      const { startHookServer } = await import("./hook-server-XK2NHLJV.js");
+      const { startHookServer } = await import("./hook-server-CWBH6PFL.js");
       const {
         writeDiscoveryByKey,
         cleanupDiscoveryByKey,
@@ -101,8 +101,8 @@ function createClaudeCodeDelivery() {
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
       const { resolveWebhookConfig } = await import("./webhook-config-O4WMQ532.js");
       const { createWebhookSink } = await import("./webhook-sink-N6AUTFL3.js");
-      const { startEventStream } = await import("./event-stream-XX5EZ6HN.js");
-      const { createMcpServer } = await import("./server-LTFG4GMV.js");
+      const { startEventStream } = await import("./event-stream-SYBUJ5EH.js");
+      const { createMcpServer } = await import("./server-R24AVNTI.js");
       const { deriveDiscoveryKey } = await import("./ancestry-ONFBQEP5.js");
       sweepStaleDiscovery();
       sweepStaleEventLogs();
@@ -278,8 +278,8 @@ function createWebhookDelivery(name) {
       const { resolveWebhookConfig } = await import("./webhook-config-O4WMQ532.js");
       const { createWebhookSink } = await import("./webhook-sink-N6AUTFL3.js");
       const { resubscribeMemberships } = await import("./resubscribe-G5OGDZJD.js");
-      const { startEventStream } = await import("./event-stream-XX5EZ6HN.js");
-      const { createMcpServer } = await import("./server-LTFG4GMV.js");
+      const { startEventStream } = await import("./event-stream-SYBUJ5EH.js");
+      const { createMcpServer } = await import("./server-R24AVNTI.js");
       sweepStaleEventLogs();
       eventLog = startEventLog({
         key: ctx.instanceKey,

package/dist/{send-cli-IPADRDD2.js → send-cli-IYJF32PE.js}

@@ -3,20 +3,20 @@ import {
   executeSend,
   parseSendRequest,
   sendFailure
-} from "./chunk-DXJ6QLSJ.js";
+} from "./chunk-PKOBR7ZN.js";
 import {
   loadPairedConfig
 } from "./chunk-YH27B6SW.js";
 import {
   GatewayClient,
   applyStableSessionId
-} from "./chunk-U4MNICQI.js";
+} from "./chunk-KH5YEJIM.js";
 import "./chunk-NR4Y54OL.js";
 import {
   loadKeystore
 } from "./chunk-CH32ELFX.js";
 import "./chunk-BLEGIR35.js";
-import "./chunk-2OLXXOT3.js";
+import "./chunk-PPTKGWFF.js";
 
 // src/tandem/send-cli.ts
 import os from "os";

package/dist/{server-LTFG4GMV.js → server-R24AVNTI.js}

@@ -3,9 +3,9 @@ import {
   createMcpServer,
   executeToolCall,
   startMcpServer
-} from "./chunk-XIDCYUTK.js";
-import "./chunk-X672ZN7V.js";
-import "./chunk-2OLXXOT3.js";
+} from "./chunk-ALZX3SGI.js";
+import "./chunk-Q7T3WAST.js";
+import "./chunk-PPTKGWFF.js";
 export {
   buildChannelInstructions,
   createMcpServer,

package/dist/{wizard-Y3ULSO2C.js → setup-handler-7HOFAD7C.js}

@@ -25,13 +25,16 @@ import {
   resolveSignatureEmission,
   resolveWebhookConfig
 } from "./chunk-V5VZPYMZ.js";
+import {
+  loadPairedConfig
+} from "./chunk-YH27B6SW.js";
 import {
   secureFile
 } from "./chunk-BLEGIR35.js";
 import {
   CODEX_LISTEN_CAP_MS,
   buildWebhookReceiverNote
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 
 // src/wizard/wizard.ts
 import crypto2 from "crypto";
@@ -824,11 +827,116 @@ registerBuiltinInstaller(
   ["pair-credential", "in-process-plugin"],
   (o) => configureOpenclaw(o)
 );
+
+// src/wizard/setup-handler.ts
+var SETUP_SUPPORTED_RUNTIMES = ["claude-code", "codex"];
+function isSetupRuntime(value) {
+  return SETUP_SUPPORTED_RUNTIMES.includes(value);
+}
+function resolvePairCode(opts) {
+  return opts.pair ?? opts.pairCode;
+}
+async function defaultRunPair(args) {
+  const { runPair } = await import("./pair-P4ILCMT7.js");
+  const { pairedConfigPath } = await import("./paired-config-JTFLHMZ2.js");
+  const { defaultPairedKeystorePath } = await import("./keystore-XLEV3FL5.js");
+  return runPair({
+    code: args.code,
+    url: args.url,
+    keystorePath: defaultPairedKeystorePath(),
+    configPath: pairedConfigPath()
+  });
+}
+async function runSetup(opts) {
+  const messages = [];
+  const requested = opts.runtime ?? "claude-code";
+  if (opts.verb === "setup" && opts.runtime !== void 0 && !isSetupRuntime(opts.runtime)) {
+    const supported = SETUP_SUPPORTED_RUNTIMES.join(", ");
+    const output = isWizardRuntime(opts.runtime) ? `\`setup\` does not support --runtime ${opts.runtime} yet (coming soon). Supported by \`setup\`: ${supported}. For ${opts.runtime}, use \`kojee-mcp init --runtime ${opts.runtime}\` for now.` : `Unknown --runtime "${opts.runtime}". \`setup\` supports: ${supported}. (For hermes/openclaw use \`kojee-mcp init\`.)`;
+    return { runtime: requested, messages, output, exitCode: 2 };
+  }
+  if (opts.token !== void 0 && (opts.url === void 0 || opts.url.trim() === "") && !opts.uninstall) {
+    return {
+      runtime: requested,
+      messages,
+      output: "--token requires --url (the broker URL the Kojee UI gave you). Re-run with --url <broker-url>. Nothing was written.",
+      exitCode: 2
+    };
+  }
+  const url = opts.url ? opts.url.replace(/\/+$/, "") : void 0;
+  if (opts.pairCode && !opts.uninstall) {
+    const pair = opts.runPair ?? defaultRunPair;
+    const pairUrl = url ?? DEFAULT_BROKER_URL;
+    try {
+      const r = await pair({ code: opts.pairCode, url: pairUrl });
+      messages.push(r.message);
+    } catch (err) {
+      return {
+        runtime: requested,
+        messages,
+        output: `Pairing failed: ${err.message}`,
+        exitCode: 1
+      };
+    }
+  }
+  const loadCfg = opts.loadPairedConfig ?? loadPairedConfig;
+  const hasCredential = loadCfg() !== null || opts.token !== void 0;
+  if (!hasCredential && !opts.interactive && !opts.uninstall) {
+    return {
+      runtime: requested,
+      messages,
+      output: "Not paired. Run `kojee-mcp pair <code> --url <broker>` first, then re-run \u2014 or pass --pair <code> (or --token <T> --url <U>), or run in a terminal for the guided wizard.",
+      exitCode: 1
+    };
+  }
+  const result = await runWizard({
+    ...opts.runtime !== void 0 ? { runtime: opts.runtime } : {},
+    ...opts.uninstall ? { uninstall: true } : {},
+    ...opts.configPath ? { configPath: opts.configPath } : {},
+    ...opts.hooksPath ? { hooksPath: opts.hooksPath } : {},
+    // Token mode (token + url) threads --token/--url into the written config.
+    ...opts.token ? { token: opts.token } : {},
+    ...url ? { url } : {},
+    ...opts.webhookUrl ? { webhookUrl: opts.webhookUrl } : {},
+    ...opts.webhookSecret ? { webhookSecret: opts.webhookSecret } : {},
+    ...opts.webhookSignatureFormat ? { webhookSignatureFormat: opts.webhookSignatureFormat } : {},
+    ...opts.webhookSignatureHeader ? { webhookSignatureHeader: opts.webhookSignatureHeader } : {},
+    ...opts.webhookSignaturePrefix !== void 0 ? { webhookSignaturePrefix: opts.webhookSignaturePrefix } : {},
+    interactive: opts.interactive,
+    ...opts.interactive && opts.prompts ? opts.prompts : {}
+  });
+  if (opts.verb === "setup" && result.exitCode === 0 && !opts.uninstall) {
+    return {
+      runtime: result.runtime,
+      messages,
+      output: crispSetupSummary(result.runtime, opts, url),
+      exitCode: 0
+    };
+  }
+  return { runtime: result.runtime, messages, output: result.output, exitCode: result.exitCode };
+}
+function crispSetupSummary(runtime, opts, url) {
+  const authLine = opts.token ? `  Auth:        token mode (--token/--url${url ? `, ${url}` : ""})` : "  Auth:        paired credentials (~/.kojee/config.json)";
+  const lines = [];
+  if (runtime === "codex") {
+    lines.push("\u2713 kojee is set up for Codex.");
+    lines.push(`  MCP config:  ${opts.configPath ?? "~/.codex/config.toml"}  ([mcp_servers.kojee])`);
+    lines.push(`  Stop hook:   ${opts.hooksPath ?? "~/.codex/hooks.json"}  (codex-stop)`);
+    lines.push(authLine);
+    lines.push("");
+    lines.push("Next: restart Codex to connect.");
+  } else {
+    lines.push("\u2713 kojee is set up for Claude Code.");
+    lines.push(`  MCP config:  ${opts.configPath ?? "~/.claude.json"}  (mcpServers.kojee)`);
+    lines.push(`  Hooks:       ${opts.hooksPath ?? "~/.claude/settings.json"}  (Stop + UserPromptSubmit)`);
+    lines.push(authLine);
+    lines.push("");
+    lines.push("Next: restart Claude Code to connect.");
+  }
+  return lines.join("\n");
+}
 export {
-  CODEX_UNVERIFIED_NOTE,
-  DEFAULT_BROKER_URL,
-  generateWebhookSecret,
-  resolveRuntime,
-  resolveWizardWebhook,
-  runWizard
+  SETUP_SUPPORTED_RUNTIMES,
+  resolvePairCode,
+  runSetup
 };

package/dist/{stop-hook-QZTFH5WV.js → stop-hook-TCPJFGFF.js}

@@ -18,7 +18,7 @@ import {
 import "./chunk-BLEGIR35.js";
 import {
   buildMonitorNudge
-} from "./chunk-X672ZN7V.js";
+} from "./chunk-Q7T3WAST.js";
 import {
   deriveDiscoveryKey,
   findClaudeAncestorPid

package/dist/{tail-stream-CEJZGSIR.js → tail-stream-4IMXI44S.js}

@@ -7,7 +7,7 @@ import {
 import "./chunk-DO42NPNR.js";
 import {
   createAdaptiveWatchdog
-} from "./chunk-74XFVX6Z.js";
+} from "./chunk-XN3IC4B5.js";
 import "./chunk-NR4Y54OL.js";
 import "./chunk-BLEGIR35.js";
 
@@ -15,6 +15,9 @@ import "./chunk-BLEGIR35.js";
 import fs from "fs";
 var STATUS_LINE_RE = new RegExp(`^\\[[^\\]]*\\] ${STATUS_LINE_PREFIX} (.*)$`);
 var HEARTBEAT_FIELDS_RE = /(^|\s)status=heartbeat(\s|$)/;
+var ROTATED_FIELDS_RE = /(^|\s)status=rotated(\s|$)/;
+var ROTATED_DROPPED_RE = /(^|\s)dropped=(\d+)(\s|$)/;
+var MESSAGE_CURSOR_RE = /(^|\s)cursor=(\S+)(\s|$)/;
 var HEARTBEAT_STALE_FLOOR_MS = envInt("KOJEE_TAIL_STALE_MS", 12e4);
 var STALE_CHECK_INTERVAL_MS = envInt("KOJEE_TAIL_CHECK_MS", 5e3);
 function envInt(name, fallback) {
@@ -38,14 +41,18 @@ async function runTail(messagesPath) {
       }
     }
   };
+  let lastCursor = null;
   function onMessageLine(line) {
     lastLifeAt = Date.now();
     if (staleAnnounced) {
       staleAnnounced = false;
       process.stdout.write("[kojee] stream recovered \u2014 events flowing again.\n");
     }
+    const cm = MESSAGE_CURSOR_RE.exec(line);
+    if (cm && cm[2]) lastCursor = cm[2];
     process.stdout.write(line + "\n");
   }
+  let statusSeeded = false;
   function onStatusLine(line) {
     const now = Date.now();
     const m = STATUS_LINE_RE.exec(line);
@@ -58,12 +65,26 @@ async function runTail(messagesPath) {
       staleAnnounced = false;
       process.stdout.write("[kojee] stream recovered \u2014 heartbeats resumed.\n");
     }
+    if (statusSeeded && ROTATED_FIELDS_RE.test(fields)) {
+      const dm = ROTATED_DROPPED_RE.exec(fields);
+      const dropped = dm ? dm[2] : "?";
+      const since = lastCursor ? `since=${lastCursor}` : "since=<your last cursor>";
+      process.stdout.write(
+        `[kojee] WARNING: event log rotated (dropped=${dropped}) \u2014 older events were truncated and may have been missed; run tandem_messages(${since}) to backfill.
+`
+      );
+    }
   }
   const followers = [
     makeFollower(messagesPath, onMessageLine, touchHeartbeat),
     makeFollower(statusPath, onStatusLine, touchHeartbeat)
   ];
-  void Promise.all(followers.map((f) => f.start()));
+  void Promise.all([
+    followers[0].start(),
+    followers[1].start().then(() => {
+      statusSeeded = true;
+    })
+  ]);
   const staleTimer = setInterval(() => {
     if (staleAnnounced) return;
     const now = Date.now();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kojee-mcp",
-  "version": "0.5.19",
+  "version": "0.6.0",
   "type": "module",
   "main": "dist/index.js",
   "exports": {
@@ -33,6 +33,7 @@
     "jose": "^5.0.0",
     "ps-list": "^8.1.1",
     "ulidx": "^2.3.0",
+    "undici": "^8.5.0",
     "zod": "^3.22.0"
   },
   "devDependencies": {